VOrAdminSecret: don't check modhash on GET requests.

This commit is contained in:
Brian Simpson
2014-02-10 15:08:16 -05:00
committed by Neil Williams
parent e8318400e4
commit 633c250490

View File

@@ -908,8 +908,9 @@ def make_or_admin_secret_cls(base_cls):
# import here so that we don't close around VModhash
# before r2admin can override
from r2.lib.validator import VModhash
VModhash(fatal=True).run(request.POST.get("uh"))
if request.method.upper() != "GET":
from r2.lib.validator import VModhash
VModhash(fatal=True).run(request.POST.get("uh"))
return False
return VOrAdminSecret